How we handle your documents

Last updated 28 October 2026

Your 3PL contract and invoices are confidential business documents, and your contract may require you to keep them private. This is how we look after them.

Where they go

• Files are sent over an encrypted connection (HTTPS) to our server at DigitalOcean.
• Each file is encrypted with its own key (AES-256-GCM) before it is written to disk. The keys are kept separately from the files.
• Your private link lets you add files and read your audit report. Nobody can download your uploaded files through it.
• Only the person running your audit can open your files, from a signed-in admin console.

How they are used

• Only to produce your audit and, if you subscribe, your monthly checks.
• To read invoices and contracts, we send their text to an AI service (Anthropic's Claude API). Under its commercial terms, Anthropic does not use this data to train its models.
• We never share your documents with your warehouse or anyone else, and we never contact your warehouse.

How long we keep them

• Files are deleted 90 days after you sign up, unless you become a customer.
• Customers' files are kept while the subscription is active and deleted within 30 days after it ends.
• You can ask us to delete everything at any time: write to [email protected].